Privacy Policy

CryptoScanRobot ("the Company", "we", "us") respects your privacy. This policy explains what personal data we collect, why we collect it, how it is stored and protected, and the rights you have — including under the EU/EEA General Data Protection Regulation (GDPR).

1. Data Controller

The data controller is CryptoScanRobot. Contact for all privacy matters: support@cryptoscanrobot.com.

2. Data We Collect

• Account data: username, email address, password (stored only as a cryptographic hash), timezone, and — if you sign in with Google — your Google account identifier and email.
• Subscription data: your plan, subscription status, and billing history. Payment card details are processed and stored by Stripe only — we never see or store your full card number.
• Exchange API keys: when you connect an exchange, your API key and secret are stored in our secured database so the Software can trade and read balances on your behalf. We never share these keys with third parties.
• Trading and usage data: your settings, bot configuration, positions, trade history, paper-trading activity, scanner results, and activity logs generated while you use the Software.
• Technical data: IP address, browser type, device information, and standard server logs used for security and troubleshooting.

3. How We Use Your Data

• Provide, operate, and secure the Software and your account.
• Execute the trading automation and market features you configure.
• Process subscriptions and payments via Stripe.
• Communicate with you about your account, subscriptions, updates, and support requests.
• Detect and prevent fraud, abuse, and unauthorized access.
• Improve the Software (aggregated, non-identifying statistics).

4. Legal Bases (GDPR)

• Contract: processing necessary to deliver the service you signed up for.
• Legitimate interest: security, fraud prevention, and service improvement.
• Consent: where explicitly given (e.g., optional features); you may withdraw consent at any time.
• Legal obligation: accounting and tax records related to payments.

5. Third-Party Processors

• Stripe — payment processing (subject to Stripe's own privacy policy).
• Google — optional sign-in authentication.
• Crypto exchanges (Binance, Kraken, Aster, NBX) — only when you connect your own API keys; your trading activity on an exchange is governed by that exchange's terms and privacy policy.
• Hosting provider (DigitalOcean) — infrastructure hosting within secured data centers.

We do not sell your personal data, and we do not share it with advertisers.

6. Cookies and Local Storage

We use browser local storage to keep you signed in (authentication token) and remember interface preferences. No third-party advertising trackers are used.

7. Data Retention

We keep your data while your account is active. Trading history and logs are retained to operate the service and for legitimate record-keeping. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is required by law (e.g., payment records for accounting).

8. Data Security

We apply industry-standard measures: encrypted transport (HTTPS/TLS), hashed passwords, access-restricted databases, and isolated server infrastructure. No method of transmission or storage is 100% secure; you are responsible for safeguarding your login credentials and for the permissions you grant to your exchange API keys.

9. International Transfers

Your data may be processed in data centers outside your country of residence. Where required, we rely on appropriate safeguards for such transfers.

10. Your Rights

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your account and personal data.
• Portability — receive your data in a structured, machine-readable format.
• Objection / restriction — object to or restrict certain processing.
• Complaint — lodge a complaint with your local data protection authority (in Norway: Datatilsynet).

To exercise any right, email support@cryptoscanrobot.com. We respond within 30 days.

11. Children

The Software is not directed at persons under 18. We do not knowingly collect data from minors.

12. Changes to this Policy

We may update this policy from time to time. Material changes will be announced in the portal with a new "last updated" date. Continued use after the effective date constitutes acceptance.

← Back to the Portal